Re: [Zope-dev] Methods through the Web (security?)

2000-05-18 Thread Martijn Faassen

Brian Lloyd wrote:
 I don't have a good answer for you, though I tend to agree with 
 you that some things just don't want to be accessed outside of 
 some larger context. I'd like to hear some different viewpoints 
 on how people think something like this should work...

What the difference seems to be is exposure to surfer through URL.
So, you could equip all items in the object tree with a flag 
'expose', that is off by default. When the user should be able
to view the thing through an URL (such as index_html), you turn it on. Would
this have any unforseen problems?

You could even have some user interface help here. Imagine I made an
index_html but forgot to expose it. Now, still logged in as manager,
I try to view it. Zope detects I'm trying to view something through
an URL that I'm not supposed to see, so asks something like "hey,
you tried to view this but it's not set to be exposed, expose this?". If
the manager chooses 'yes', the expose flag is set to true.

Hm, I suppose the problem here would arise with methods that directly
return HTML output through an URL. This would seem to be fairly rare,
though, and you can always wrap it up in some object that does have
the expose flag.

Regards,

Martijn
 

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Methods through the Web (security?)

2000-05-18 Thread Martijn Faassen

Brian Lloyd wrote:
 Yes you could, except that you would also make them inaccessible
 from DTML (or from anywhere else) for the same class of users. 
 
 Is it really acceptable that in order to use dtml-in objectIds
 on a page that needs to be accessible to anonymous users that I 
 must grant 'Access contents information' to anonymous users and
 thus give them the ability to inspect my objects if they want to? 

So you have something like:

'Access at all' (this is 'Access Contents Information')

'Access through URL' (the 'expose' flag I talked about in previous posts)

'Access through FTP'

'Access through XML-RPC'

etc.

This would be for individual Zope objects.

For objects that expose methods, perhaps you'd need yet another permission,
something like:

'Access methods at all'

'Access methods through URL'

..

Of course this sounds like it could get unwieldy, unless there was
some clear user interface.
  
 I have a feeling that intent will need to become more important
 somehow in the future. As we add more protocols and types of 
 usage to Zope, it becomes harder for a single permission to 
 really cover a resource in a way that makes sense for all of 
 the various usages.

Right.

 From the point of view of an xml-rpc based
 client app, having objectIds and the like may be an absolute 
 necessity, while from a pure HTTP standpoint many would 
 at best consider it superfluous or at worst consider it
 a security hole.
 
 *sigh*. Maybe the right short-term thing is to just leave it 
 the way it was and tell people who may be concerned about it 
 to turn it off via that permission and live the repercussions 
 that will have in their DTML. I guess at least that way the 
 software isn't taking the choice out of their hands.

Um, is there a good workaround then, if you turn it off? I mean,
if you turn off 'Access Contents Information' *and* you want a
DTML method that generates an index of all subfolders, what do you
do? Work with proxies?

Regards,

Martijn

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Distributed ZODB-Transactions

2000-05-18 Thread Heine Gregor

Zopistas!

I want to write an Product that mirrors every ZODB-Transaction to a
Backup-Server.
The idea was to trap every transaction (i.e. creation, change, deletion of
zope-objects) and transfer a copy of the object to another server (via
XML-RPC?!?) after the transaction got commited. 
I've been debugging through various zope-classes (esp. transaction.py,
connection.py) but couldn't understand the way, zope manages the
transactions. 
The creation and deletion process always seems to trigger a transaction for
the parent object.
Has anybody an idea?

Thanx,

Gregor!




___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Distributed ZODB-Transactions

2000-05-18 Thread Chris McDonough

Heine,

You'll want to take a look at lib/python/ZODB/FileStorage,
lib/python/ZODB/DemoStorage, and lib/python/ZODB/MappingStorage for
ideas.  You may also want to take a look at the ZODB Wiki at
http://www.zope.org/Members/jim/ZODB



Heine Gregor wrote:
 
 Zopistas!
 
 I want to write an Product that mirrors every ZODB-Transaction to a
 Backup-Server.
 The idea was to trap every transaction (i.e. creation, change, deletion of
 zope-objects) and transfer a copy of the object to another server (via
 XML-RPC?!?) after the transaction got commited.
 I've been debugging through various zope-classes (esp. transaction.py,
 connection.py) but couldn't understand the way, zope manages the
 transactions.
 The creation and deletion process always seems to trigger a transaction for
 the parent object.
 Has anybody an idea?
 
 Thanx,
 
 Gregor!
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )

-- 
Chris McDonough
Digital Creations
Publishers of Zope - http://www.zope.org

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Methods through the Web (security?)

2000-05-18 Thread Steve Alexander

Martijn Faassen wrote:
 
 Brian Lloyd wrote:
  Yes you could, except that you would also make them inaccessible
  from DTML (or from anywhere else) for the same class of users.
 
  Is it really acceptable that in order to use dtml-in objectIds
  on a page that needs to be accessible to anonymous users that I
  must grant 'Access contents information' to anonymous users and
  thus give them the ability to inspect my objects if they want to?
 
 So you have something like:
 
 'Access at all' (this is 'Access Contents Information')
 
 'Access through URL' (the 'expose' flag I talked about in previous posts)
 
 'Access through FTP'
 
 'Access through XML-RPC'
 
 etc.

This is an interesting idea --

The Zope server is an Object database that exposes objects and
attributes via various protocol modules.

I can see a future where you'd want to be able to plug in arbitrary
protocol modules -- and perhaps more than one instance of each type of
protocol (for example, http on ports 80 and 8080).

It would make sense to me for each protocol to have its own set of
"expose flags" or even "expose rules" for each addressable
object/attribute.

The user interface to manage the objects could collect these all into
one place, so as the manager of an object, you can decide what is
allowed to be seen via which protocols.

--
Steve Alexander
Software Engineer
Cat-Box limited

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Methods through the Web (security?)

2000-05-18 Thread Chris Withers

Martijn Faassen wrote:
 Various things. What you'd need is turn off 'view' permission by
 default for just about *everything* except possibly DTML Documents,
 otherwise it's just too easy to set up a site that exposes too
 much. Exposure to URLs should be turned off by default.

Well, this is why doing it with permissions is great because you can set
it to your preference in the root folder and aquire it from there
onwards...

 Everything would still have 'execute' permission, so I don't think
 that should be a permission at all, as everything really has it and
 nothing can do without it anyway.

Yes, but you may want to restrict WHO can execute something. Perhaps you
have a method that only managers should be able to execute, and no-one
should be able to 'view'.

 'view' and 'access' merge into a single thing called 'access'.

I still don't really see any point in the 'access' permission and, in
fact I've just been bitten badly by it (see my RecentChanges post to the
Zope list...)

 the question is if you really ever want that in a site. You usually
 only call such methods from DTML.

Not so, try out ZWiki's ;-)

I notice there is an FTP permission already. Maybe there should be:
- an execute permission
- a 'view' permission for each 'server': HTTP, FTP, XML-RPC...

cheers,

Chris

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Zope and SMP

2000-05-18 Thread Jason Spisak

Thilo Mezger:

 hi!
 

Howdy.

 yesterday, i have test-driven zope on a dual-pentium smp-machine
 running linux 2.2 and i was very disappointed by the results.
 the zserver threads are running on both cpu's but it seems to
 scale really, really badly. i have only done some very cheap
 benchmarking but it seems that a single cpu is faster than 2 cpu's.
 
 but as i said, this is not proper benchmarking (yet).  i wanted to
 ask if someone has already tried zope on more than 1 cpu and/or
 could point me to a direction where i could find out more about
 this subject?
 

I have our intranet running off a dual Xenon 350Mhz running 2.2.12-20smp
and things are terrific. I haven't ran any comparisons either, but speed
isn't an issue.

 cheers!
 thilo
 
 
 -- 
 [EMAIL PROTECTED]
 innominate AG
 networking people
 fon: +49-30-308806-0  fax: -77 web: http://innominate.de pgp: /pgp/tm
 

All my best,

Jason Spisak
CIO
HireTechs.com
6151 West Century Boulevard
Suite 900
Los Angeles, CA 90045
P. 310.665.3444
F. 310.665.3544

Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email
address may not be added to any commercial mail list with out my
permission.  Violation of my privacy with advertising or SPAM will
result in a suit for a MINIMUM of $500 damages/incident, $1500 for
repeats.

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Distributed ZODB-Transactions

2000-05-18 Thread Heine Gregor

  I want to write an Product that mirrors every ZODB-Transaction to a
  Backup-Server.
  The idea was to trap every transaction (i.e. creation, change, deletion
 of
  zope-objects) and transfer a copy of the object to another server (via
  XML-RPC?!?) after the transaction got commited.
  I've been debugging through various zope-classes (esp. transaction.py,
  connection.py) but couldn't understand the way, zope manages the
  transactions.
  The creation and deletion process always seems to trigger a transaction
 for
  the parent object.
  Has anybody an idea?
 
 Data.fs is essentially a log file that is appended with binary data. 
 The only time the data is changed rather than appended is when you pack
 the database.  Therefore, it may be easier to write a script that
 catches the data that is appended and appends it to the backup file. 
 When the script detects the file has shortened (after a packing
 operation), it should copy the whole file over.
 
 The simple fact that data is appended rather than changed makes Data.fs
 quite reliable.  It can withstand most kinds of failure.  And the Zope
 undo mechanism is very effective.
 
 So I would suggest that the backup you intend to perform does not need
 to be an integral part of Zope.  Rather, it is appropriate that it be a
 background process run periodically.
 
 Shane
  
OK, I admit, I didn't tell you the whole truth. ;-) 
The Backup-Server should not only backup one, but various
Zope-installations (sort of 'backup-central').
My idea was to create a folder for each backuped server. This folder
holds the complete object-tree of a backup-client. 
Each time a change in the database of the client occurs, the client
informs the server about it (tells the server which object has been changed,
created or deleted). Then the server requests that object from the client.
The client pickles the object, sends it to the server and the server
unpickles it again and puts it in the right place in the client folder.
My problem is the first step: how does the client recognize, which
object has to be updated? In the case of a creation and deletion of an
object, the transaction-class handles the parent object and not the object
itself.

Thanx,

Gregor!

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] DCOracle and floats (was: DCOracle Problem on HPUX)

2000-05-18 Thread Matthew T. Kromer

"R. David Murray" wrote:
 
 On Thu, 18 May 2000, Matthew T. Kromer wrote:
  Yes, this is in the CVS version; Chris Petrilli will probably make an
  announcment  a release soon.  The behavior is such that NUMBER with
  neither scale nor precision is a float.
 
 Great!  Thanks for the info.  From your last sentence I'm wondering if
 the fix is a simple change to the if test in _description in
 ociCurs.py...maybe I'll experiment, not knowing how soon 'soon' is grin.

In this case, yes, that's all that it is (well, it was a 1-liner in
ociCurs.py).

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Distributed ZODB-Transactions

2000-05-18 Thread Chris McDonough

Well, that sort of makes sense.  The containing object is the object
that needs to be updated to rid itself of the reference to the contained
object.  I'm not sure I understand the problem.  The object to be
updated *is* the container.

 My problem is the first step: how does the client recognize, which
 object has to be updated? In the case of a creation and deletion of an
 object, the transaction-class handles the parent object and not the object
 itself.

-- 
Chris McDonough
Digital Creations
Publishers of Zope - http://www.zope.org

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] updated Wikki with __call__ issue

2000-05-18 Thread Chimezie Thomas-Ogbuji

I added another note on the Wikki regarding the XSLTMethod __call__
issue, more information on the ZPublisher is neccessesary for any
progress.  Is there any good documentation on the subject?
Here is the link to the issue:
http://216.164.72.7:7780/Wiki/Members/jim/ZDOM/Issue%20with%20__call__%20and%20Aquisition

-- 
Chimezie Thomas-Ogbuji
Junior Consultant
Fourthought Inc.
(303) 583 9900 ext 104
[EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Re: Fixed reply Re: [Zope-dev] Trouble setting LoginManager default user class default user class

2000-05-18 Thread Phillip J. Eby

At 04:04 PM 5/18/00 -0400, Dan L. Pierson wrote:

The portal now gets created, but I can't login to the initial account.
I also can't display the members roster by clicking on Members
(AttributeError for getUsers), but can write a DTML method in the
UserSource that lists all one user.  The code in DemoPortalBase that
trys to display the roster follows, I suspect it's this bug again, but
don't know where to put the __of__:

Actually, the problem is probably that, as a DTML method, it expects to be
passed its containing object as the first parameter.  You might try using a
PythonMethod, DTML Document, or an ExternalMethod instead.


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope-dev] Adding ZCatalog index programatically

2000-05-18 Thread Chris McDonough

How about:

yourcatalog._catalog.addIndex(id, 'FieldIndex')

replace FieldIndex with TextIndex or KeywordIndex as desired.


"R. David Murray" wrote:
 
 I was just looking at the ZCatalog code to figure out how to programatically
 add an index to a Catalog.  I figured out how to do that fairly easily,
 but the code I was looking at has me a bit mystified.  The method
 manage_addIndex is defined.  The form that you use through the
 management interface to add an index has a submit button whose name
 is manage_addIndex:method.  OK, that all looks like reasonable
 magic (magic because I don't know exactly what happens when a button
 gets marshalled as a method).
 
 Here's the part I don't understand: the form's action is set to the
 Catalog itself.  manage_addIndex expects the index name and type
 as its first two parameters.  Where does the magic come from that
 turns the form submission into a correct call to manage_addIndex?
 
 Probably I'm missing something obvious, but I will appreciate any
 aid in increasing my Zope Zen level here grin.
 
 --RDM
 
 ___
 Zope-Dev maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope-dev
 **  No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope )

-- 
Chris McDonough
Digital Creations
Publishers of Zope - http://www.zope.org

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] How does the submit magic work in, eg, ZCatalog manage_addIndex?

2000-05-18 Thread R. David Murray

On Thu, 18 May 2000, Chris McDonough wrote:
 yourcatalog._catalog.addIndex(id, 'FieldIndex')

Sorry, I started that email when I was about to ask the question
you answered, then figured it out myself and changed the email
body to ask a new question, but forgot to change the email
subject frown.
 
 "R. David Murray" wrote:
  
  I was just looking at the ZCatalog code to figure out how to programatically
  add an index to a Catalog.  I figured out how to do that fairly easily,
  but the code I was looking at has me a bit mystified.  The method
  manage_addIndex is defined.  The form that you use through the
  management interface to add an index has a submit button whose name
  is manage_addIndex:method.  OK, that all looks like reasonable
  magic (magic because I don't know exactly what happens when a button
  gets marshalled as a method).
  
  Here's the part I don't understand: the form's action is set to the
  Catalog itself.  manage_addIndex expects the index name and type
  as its first two parameters.  Where does the magic come from that
  turns the form submission into a correct call to manage_addIndex?
  
  Probably I'm missing something obvious, but I will appreciate any
  aid in increasing my Zope Zen level here grin.
  
  --RDM
  
  ___
  Zope-Dev maillist  -  [EMAIL PROTECTED]
  http://lists.zope.org/mailman/listinfo/zope-dev
  **  No cross posts or HTML encoding!  **
  (Related lists -
   http://lists.zope.org/mailman/listinfo/zope-announce
   http://lists.zope.org/mailman/listinfo/zope )
 
 -- 
 Chris McDonough
 Digital Creations
 Publishers of Zope - http://www.zope.org
 


___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




[Zope-dev] Re: Strange ZClass permissions problem with 2.2a1

2000-05-18 Thread Dr. Ross Lazarus

Yep, trying to access a newly instantiated empty zclass instance
produces the same error. 

Looks like a bug. Email me if you want an exported version of my zclass
to poke and prod at...


Tres Seaver wrote:

 Does the problem repeat in the "vanilla" version if you just create a
 new instance of your ZClass, instead of importing the old pickle?  If
 so, it is definitely a "bug";  if not, it may be a "migration problem,"
 with a fix like the one Brian posted for recursively "re-ownering"
 Zope.org.


  If I take out manage_tabs from the offending ZClass index_html
  method, I can view index_html (but of course, I can't use the
  management stuff built in! making it rather useless), so that's
  where we're getting into trouble for sure.
  
  I've tried starting out with a vanilla 2.2a1 Data.fs and importing all
  the zclasses and the relevent folders - no difference.
  
  Anyone else seeing this?
  Is this worthy of the collector?
 

-- 

Dr Ross Lazarus
Associate Professor and Sub-Dean for Information Technology
Faculty of Medicine, Room 126A, A27, University of Sydney,
Camperdown, NSW 2006, Australia
Tel: (+61 2) 93514429   Mobile: +61414872482  
Fax: (+61 2) 93516646   Email: [EMAIL PROTECTED]

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )




Re: [Zope] subfolder wrong absolute_url

2000-05-18 Thread Steve Alexander

Ulrich Wisser wrote:
 
 
 The path is used by the browser, not Zope. IE and Netscape
 will store your login/password to send it with every GET request
 which is in the path, e.g.:
 
 authenticate on /  - path is / - all request will be with auth info
 authenticate on /sub   - path is / - see above
 authentivate on /sub/  - path is /sub/ - only request with /sub/ will be
with auth info
 
 But all this is done by the browser.
 
 I believe the folder object should give a trailing "/" as absolute url.

In that case, you're right :-)

However, any Zope object can potentially have sub-objects or attributes.
As far as a browser is concerned, the any zope object can look like a
folder at some point. Add acquisition into the mix, and you can make a
URL to a valid object have other stuff on the end to an arbitrary
length.

Therefore, your suggestion above should apply to just about all URLs
Zope receives. If Zope receives a request for "/spam/spam/foo" it should
always issue a redirect (or whatever code it should be) to
"/spam/spam/foo/" -- regardless of whether foo is of Folder type,
ObjectManager type or DTML method type, or whatever.

Are there any downsides to having this behaviour for all objects/all
URLs?

Or perhaps there could be some kind of per-path switch inside Zope that
turns the redirect behaviour on or off.

--
Steve Alexander
Software Engineer
Cat-Box limited

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Zope 2.2.0a1 permission problems

2000-05-18 Thread Kyler B. Laird


I just installed release 2.2.0a1 on a glibc Linux box, but I keep
getting a permission problem when accessing a database query.

I have encountered the same problem using ZOracleDA
under SPARC Solaris.

File /data/www/Zope/Zope-2.2.0a1-src/lib/python/DocumentTemplate/DT_In.py,
 line 602, in renderwb
  (Object: jis_query)
  Unauthorized: 0  

I've been especially frustrated by this.  I just brought
up Zope 2.2.0a1 because we have a few projects that need
to be developed and I want them all using Zope.  I don't
want to have a lot of conversion pain going from 2.1.6,
so I took a chance on using alpha software in this
environment.  I know the risks.  That doesn't make this 
any less painful.

I often tell our students that one of the best features
of Open Source software is that if there's an error, it
can be fixed (by the user or by a helper of the user's
choosing) without waiting on the company who controls
the source.  I'm just starting to learn Python, so I
didn't feel like I was up to the task of doing anything
usful in this case.

I was wrong.

After beating on this over the last day or so trying to
understand what was happening at the Web interface level
(thinking that I must have just screwed up a permissions
setting somewhere), I finally looked at the code and
simply commented out line 602 in
/data/www/Zope/Zope-2.2.0a1-src/lib/python/DocumentTemplate/DT_In.py

# raise ValidationError, index

Ta da!  It works...for now.  This little patch will get
me up and going.  I trust that someone will fix whatever
problem necessitated this in a future release and I
won't need this awful kludge, but it sure is nice to be
able to use it now.

--kyler

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Broken ZWiki

2000-05-18 Thread Tom Smith

when I install ZWiki Product, the FrontPage, HelpPage etc are all
brokendoes it rely on another class being present?

cheers

tom

[EMAIL PROTECTED] [EMAIL PROTECTED]
http://www.dmrl.com http://www.OTHERmedia.com http://i.am/tom.smith
phone://0171 9563160 mobile://07720 288285 video-conf://0171 9563071
location://57a Farringdon Road, London, EC1M 3JB



___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Cache

2000-05-18 Thread Dr. Peer Griebel

Jonothan Farr wrote:
 
  How can I disable the browser cache in my zope documents ?
 
 One thing you can do is set the 'Expires' header like so:
 
 dtml-call "RESPONSE.setHeader('Expires', _.DateTime().rfc822())"

This works using Netscape. But for IE I had to use:

dtml-call "RESPONSE.setHeader('Expires', '-1')"
dtml-call "RESPONSE.setHeader('Cache-Control', 'no-cache')"
dtml-call "RESPONSE.setHeader('Pragma', 'no-cache')"

I think the last Pragma can be left out. But the Cache-Control header
ist neccessary. I got the information out of rfc2616.


-- 
connection reset by
  Peer

___
Dr. Peer Griebel  Tel. +49 7581 4831 23
Geschäftsführer   Fax. +49 7581 4831 11
Knoll Informationssysteme GmbH   http://www.knoll-is.de
Dreiköniggasse 17   mailto:[EMAIL PROTECTED]
88348 Saulgauprivat: mailto:[EMAIL PROTECTED]

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Cache

2000-05-18 Thread Mabe, Brad

Does this work in IE5?  I'm using similar META tags which work for IE4 and
Netscape but don't work in IE5.

  -=Brad=-

-Original Message-
From: Dr. Peer Griebel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 18, 2000 10:32 AM
To: [EMAIL PROTECTED]
Subject: Re: [Zope] Cache


Jonothan Farr wrote:
 
  How can I disable the browser cache in my zope documents ?
 
 One thing you can do is set the 'Expires' header like so:
 
 dtml-call "RESPONSE.setHeader('Expires', _.DateTime().rfc822())"

This works using Netscape. But for IE I had to use:

dtml-call "RESPONSE.setHeader('Expires', '-1')"
dtml-call "RESPONSE.setHeader('Cache-Control', 'no-cache')"
dtml-call "RESPONSE.setHeader('Pragma', 'no-cache')"

I think the last Pragma can be left out. But the Cache-Control header
ist neccessary. I got the information out of rfc2616.


-- 
connection reset by
  Peer

___
Dr. Peer Griebel  Tel. +49 7581 4831 23
Geschäftsführer   Fax. +49 7581 4831 11
Knoll Informationssysteme GmbH   http://www.knoll-is.de
Dreiköniggasse 17   mailto:[EMAIL PROTECTED]
88348 Saulgauprivat: mailto:[EMAIL PROTECTED]

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] ZWiki RecentChanges problem with 2.1.6

2000-05-18 Thread Chris Withers

Chris Withers wrote:

[snip rubbish ;-)]

This actually isn't the case, someone had just helpfully turned off
'Access Contents Information' higher up the tree...

Doh!

Chris

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] ZSQL-Methods: last inserted id

2000-05-18 Thread Ron Bickers

You can get a ZSQLMethod that's used for inserting to return the last
inserted ID by doing the following:

  INSERT ...whatever...

  dtml-var sql_delimiter

  SELECT LAST_INSERT_ID() AS newid

You get the results as you would with any ZSQLMethod:

  dtml-in my_zsql_method
  Inserted ID: dtml-var newid
  /dtml-in

___

Ron Bickers
Logic Etc, Inc.
[EMAIL PROTECTED]


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Andy
 Sent: Wednesday, May 17, 2000 7:45 PM
 To: [EMAIL PROTECTED]
 Subject: [Zope] ZSQL-Methods: last inserted id



 I wonder how I can find out about the last inserted id of a row in my
 mysql-database, which I inserted through a ZSQL-Method...

 I tried mysql's built-in function LAST_INSERT_ID(), but that did not solve
 my problem...


 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] Newbie: MS Access ODBC connection strings

2000-05-18 Thread michael angelo ruberto

i had a similar problem recently. my access DB was not showing up in the
data sources list until i deleted the ODBC connection from windows control
panel and recreated it - i guess i messed up the first time. make sure your
DB shows up in the "User Data Sources" list in the ODBC Data Source
Administrator in Windows and in the ODBC Data Source list in the "Add Z ODBC
Database Connection" screen in ZOpe. my connection string is simply the
database name. now that i have a working connection all of my tests fail.
does anyone know why?

-mike-

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 18, 2000 5:19 AM
To: [EMAIL PROTECTED]
Subject: [Zope] Newbie: MS Access ODBC connection strings


Before you all start, I know, MS Access is pants and I should be using
a "real" database.  And I shall, once the "proof of concept" stage is
passed and I can migrate the existing data over to one.  But for now
I'm stuck with it.

Right, that over, here's my plea: I'm trying to create a connection
object to a MS Access 97 database.  I've installed the ODBC DA product
but I cannot get my connection to actually connect.  The error I get is,
"invalid connection string: project,"  (project is the DSN name).

According to the docs that come with the ODBC-DA, there's usually no
need for a connection string and accordingly I have left it blank; I
presume that the DA is defaulting to connecting using the DSN name as
its string.  The database has no security settings that might limit
access.

What's going wrong?  Help!
--
Andy Gates, Learning and Research Technology
[EMAIL PROTECTED] - ICQ#74362415


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists -
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] listmate + CSV problem

2000-05-18 Thread michael angelo ruberto

hi, Heiko

it works! i had to replace all whitespaces in column names with
under_scores. it's the whitespace that created a problem. now i have to
enter "NULL" in all the empty cells to make the table line up properly
-( but this is not your fault, it's mine. i think many people in my company
are going to be happy now! thank you for all the help you have provided.

-mike-

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Heiko Stoermer
Sent: Thursday, May 18, 2000 3:46 AM
To: michael angelo ruberto
Subject: Re: [Zope] listmate + CSV problem


michael angelo ruberto wrote:


 Error Type: Bad Request
 Error Value: Invalid or duplicate property id


yes, I see. the first line of the csv will be split up into words and
for each word a table column is created.
these column names are actually properties of some internal object, so
they MUST be unique. So if you have the same word appear twice in the
first line of the file, you will get this error.

the file size or column number should not be a problem. duplicate column
names are.

hope this helps,
Heiko

--
[EMAIL PROTECTED]
innominate AG
 networkingpeople
fon: +49.30.308806-0 fax: -77   web: http://innominate.de


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Zope Product tools.

2000-05-18 Thread Jerry Spicklemire


Bryan Patrick Coleman asked:

I was wondering if there were any products for the following Genre's
configuration managment, Project managment, bug tracking, cvs browsing
etc

for Code / Bug Tracking check out :

http://www.zope.org/Members/klm/TrackerWiki/FrontPage

http://www.zope.org/Members/shalabh/iTrack

for Project Management :

http://bits.netizen.com.au/Xen/

http://sourceforge.net/project/?group_id=2370

Basically anything that would help with Development and testing.

For that matter it would be cool to see what kind of application type
products are available for Zope use.

Not limited to Zope, but Python related, check out:

http://www.software-carpentry.com

Later,
Jerry S.




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] how do you pronounce 'ZOPE'?

2000-05-18 Thread Chris McDonough

At DC, we pronounce it J-I-M   F-U-L-T-O-N. :-)

But some people pronounce it like "soap" with a Z instead of an S at the
beginning.

Stephen Nosal wrote:
 
 Folks -
 
 Just a recurring question around the office, is there an official pronunciation for 
'ZOPE'?
 
 - Steve
 
 __
 Get your Private, Anti-Spam, Free Email at http://e3mil.com
 and Step into a Friendly Universe!
 
 ___
 Zope maillist  -  [EMAIL PROTECTED]
 http://lists.zope.org/mailman/listinfo/zope
 **   No cross posts or HTML encoding!  **
 (Related lists -
  http://lists.zope.org/mailman/listinfo/zope-announce
  http://lists.zope.org/mailman/listinfo/zope-dev )

-- 
Chris McDonough
Digital Creations
Publishers of Zope - http://www.zope.org

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




RE: [Zope] zsql method??/

2000-05-18 Thread Eric L. Walstad

Oops, I forgot to mention that the CONV function is used in your ZSQL
method.  Here's the ZSQL Method I use (returns upcoming birthdays falling
within this, and the next, month):

SELECT FirstName, LastName, MONTH(Birthday) AS Month, DAYOFMONTH(Birthday)AS
Day, DATE_FORMAT(Birthday, '%M %D, %Y') AS BDay,
CONV(ROUND((TO_DAYS(NOW())-TO_DAYS(Birthday))/365.25), 10, 10) as WillBeAge
FROM users
WHERE
MONTH(Birthday) = MOD(MONTH(NOW()), 12) + 1
OR
(MONTH(Birthday) = MONTH(NOW()) AND DAYOFMONTH(Birthday) =
DAYOFMONTH(NOW()))
ORDER BY
Month, Day


// -Original Message-
// From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
// Jonathan Park
// Sent: Thursday, May 18, 2000 1:35 PM
// To: [EMAIL PROTECTED]
// Subject: [Zope] zsql method??/
//
//
// Hello everyone!
//
//   I have a dtml method that calls in the sql method like this
//dtml-in sql method
//   the result I get is what I would expect except in the unique_#
// field  'L'
// is added at the end of the number
//   ex:
//
//   unique_#blahblah   blah
// 1L  data   data   data
// 2L  data   data   data
//
//  any reason why it is adding the 'L'???
//
// thanks
// -jon
//
// Have a great afternoon!
//
//
// ___
// Zope maillist  -  [EMAIL PROTECTED]
// http://lists.zope.org/mailman/listinfo/zope
// **   No cross posts or HTML encoding!  **
// (Related lists -
//  http://lists.zope.org/mailman/listinfo/zope-announce
//  http://lists.zope.org/mailman/listinfo/zope-dev )
//


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Limits on text posting

2000-05-18 Thread Carlos A. Carnero Delgado

Hello again, zopistas!

Actually, this is not directly related to Zope, but I just wanted to
know. I have a simple form with a textarea, exactly, how much text fits
in a text area? I mean, is there an upper limit to the number of
characters the end user can type in the textarea?
--
[ c a r l o s  c a r n e r o ]
[ r t v  c o m e r c i a l ]
[ t e x e l @ r t v c . c o m . c u ]


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Local File System

2000-05-18 Thread Tom Scheidt

Hi and thanks,

I want to view images in a local fs on a web page so i have:

dtml-with images

dtml-in images start=0 size=50 orphan=0 reverse

img src="dtml-var "(THE IMAGE ID'S)""br

/dtml-in

/dtml-with

I've read that I can get the filenames as id's by using
getObject, but I can't seem to make it work.


Tom Scheidt   |   www.falsemirror.com   |   [EMAIL PROTECTED]

---


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Zope and PHP

2000-05-18 Thread andres

On Thu, May 18, 2000 at 12:13:51PM -0400, Chris Herrnberger wrote:
 Greetings,
 
 In discussions with friends the question came up is zope compatible with php,
 specifically if zope is run through apache. 
 

Check out one way to integrate PHP output within Zope at:

www.zope.org/Members/Mamey/PHP

written by yours truly. The example needs some work to support the POST
method and cookies.

--
Andres Corrada-Emmanuel   Email: [EMAIL PROTECTED]
--

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Zope and PHP

2000-05-18 Thread Chris Herrnberger

On Thu, 18 May 2000, [EMAIL PROTECTED] wrote:
 On Thu, May 18, 2000 at 12:13:51PM -0400, Chris Herrnberger wrote:
  Greetings,
  
  In discussions with friends the question came up is zope compatible with php,
  specifically if zope is run through apache. 
  
 
 Check out one way to integrate PHP output within Zope at:
 
 www.zope.org/Members/Mamey/PHP
 
 written by yours truly. The example needs some work to support the POST
 method and cookies.
 
 --
 Andres Corrada-Emmanuel   Email: [EMAIL PROTECTED]
 --

Thanks for the reference. 

Chris

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




[Zope] Newbie - problem connecting to MS Access DSN

2000-05-18 Thread richard

Andy,

I have this working fine.  Are you running NT or \'98?  If NT is Zope running as a 
service?  If so, did you create your DSN as a System DSN?

Richard

 part of original message  

Right, that over, here\'s my plea: I\'m trying to create a connection 
object to a MS Access 97 database. I\'ve installed the ODBC DA product 
but I cannot get my connection to actually connect. The error I get is, 
\"invalid connection string: project,\" (project is the DSN name). 


  


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] ZScheduler

2000-05-18 Thread Jason Spisak

 Chris Withers wrote:
  
  Karl Lewin wrote:
   What sort of scheduling options would be "nice to have" in a scheduling
   product?
  
  1. The ability to have a method called at a certain DateTime
  eg: next Tuesday, at 5pm GMT
  
  2. The ability to have a method executed every x, where x is a period of
  time.
  eg: every 2 hours
  
  3. The ability to have a method executed every x, starting and y and
  finished at z, where x is a period of time, y is a  DateTime object and
  z is a DateTime object that may be omitted if the process is nto to
  terminate.
  eg: every Tuesday at 4pm, starting May 20th, ending December 31st
  every Wednesday at 5pm GMT from now onwards.
  
  Obviously the more flexible the expression of time periods and dates,
  especially in the last option (for example: every other Tuesday starting
  today and ending next week would be nice ;-), the better :-)
 
 
 I would add: something along the lines of: every first and third
 tuesday of the month. To this list.
 

I would add the "last day of the month" as well.

All my best,


Jason Spisak
CIO
HireTechs.com
6151 West Century Boulevard
Suite 900
Los Angeles, CA 90045
P. 310.665.3444
F. 310.665.3544

Under US Code Title 47, Sec.227(b)(1)(C), Sec.227(a)(2)(B) This email
address may not be added to any commercial mail list with out my
permission.  Violation of my privacy with advertising or SPAM will
result in a suit for a MINIMUM of $500 damages/incident, $1500 for
repeats.

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )